DEBIAN-CVE-2021-20294

A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality,...

CVE-2021-20294

A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality,...

CVE-2021-30219

samurai 1.2 has a NULL pointer dereference in printstatus function in build.c via a crafted build file...

Denial Of Service (DoS)

The PoDoFo::PdfVariant::DelayedLoad function in PdfVariant.h in PoDoFo 0.9.6 allows remote attackers to cause a denial of service NULL pointer dereference via a crafted file, because of ImageExtractor.cpp...

binutils readelf 缓冲区错误漏洞

binutils readelf is a software application. Displays information about one or more ELF format object files. A buffer error vulnerability exists in binutils readelf 2.35 program, which can be exploited by an attacker to potentially trigger a stack buffer overflow if the victim can be persuaded to...

Graphviz 安全漏洞

Graphviz is a suite of open source graph visualization software. The software is primarily used to draw graphics specified in DOT language scripts. A security vulnerability exists in Graphviz Graph Visualization Tools that could allow a remote attacker to execute arbitrary code or cause a denial ...

CVE-2021-3520

There's a flaw in lz4. An attacker who submits a crafted file to an application linked with lz4 may be able to trigger an integer overflow, leading to calling of memmove on a negative size argument, causing an out-of-bounds write and/or a crash. The greatest impact of this flaw is to availability...

CVE-2021-29473

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the...

CVE-2021-29473

Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the...

CVE-2021-29470

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An...

CVE-2021-3496

A heap-based buffer overflow was found in jhead in version 3.06 in Get16u in exif.c when processing a crafted file...

CVE-2021-3496

A heap-based buffer overflow was found in jhead in version 3.06 in Get16u in exif.c when processing a crafted file...

Heap overflow

A heap-based buffer overflow was found in jhead in version 3.06 in Get16u in exif.c when processing a crafted file...

UBUNTU-CVE-2021-3496

A heap-based buffer overflow was found in jhead in version 3.06 in Get16u in exif.c when processing a crafted file...

CVE-2021-3496

A heap-based buffer overflow was found in jhead in version 3.06 in Get16u in exif.c when processing a crafted file...

CVE-2021-3496

A heap-based buffer overflow was found in jhead in version 3.06 in Get16u in exif.c when processing a crafted file...

The vulnerability of Microsoft Office, Microsoft Excel, and Microsoft Office Web Apps Server packages lies in errors related to code generation, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office, Microsoft Excel, and Microsoft Office Web Apps Server packages is related to errors in code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

UBUNTU-CVE-2021-30019

In the adtsdmxprocess function in filters/reframeadts.c in GPAC 1.0.1, a crafted file may cause ctx-hdr.framesize to be smaller than ctx-hdr.hdrsize, resulting in size to be a negative number and a heap overflow in the memcpy...

Design/Logic Flaw

In the function gfhevcreadppsbsinternal function in mediatools/avparsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps-numtilecolumns may be larger than sizeofpps-columnwidth, which results in a heap overflow in the loop...

CVE-2021-30019

In the adtsdmxprocess function in filters/reframeadts.c in GPAC 1.0.1, a crafted file may cause ctx-hdr.framesize to be smaller than ctx-hdr.hdrsize, resulting in size to be a negative number and a heap overflow in the memcpy...